Systems and methods for secure access smart hub for cyber-physical systems
AssigneeHoneywell International Inc.
InventorsLy Vessels, Daniel Tyler, William Neumann
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed for providing a secure communication between a first network and a second network. The method may include receiving, at a Secure Access Smart Hub (SASH), a signal from the first network requesting a communication connection; establishing a first connection between the first network and the SASH; establishing a second connection between the SASH and the second network; receiving, at the SASH, data from the first network having a first protocol; translating the data having the first protocol into data having a second protocol; and transmitting the data from the SASH to the second network.
Claims18
A computer-implemented method for providing a secure communication between a first network and a second network, the method comprising:
- receiving, at a Secure Access Smart Hub (SASH), a signal from the first network requesting a communication connection;
- establishing a first connection between the first network and the SASH;
- establishing a second connection between the SASH and the second network by creating and hosting a secure virtual private network (VPN) and requesting a connection from a cyber-physical system (CPS) device, wherein the SASH securely connects the CPS device to the first network through the second network;
- receiving, at the SASH, data from the first network having a first protocol;
- translating the data having the first protocol into data having a second protocol;
- and
- transmitting the data having the second protocol from the SASH to the second network, wherein the second network is a CPS network running fieldbus network protocol supporting real-time and performance constraints, and the second network is restricted to a point to point connection with a master system.
A system for providing a secure communication between a first network and a second network, the system comprising:
- a memory storing instructions;
- and
- a processor executing the instructions to perform a process including:
- receiving, at a Secure Access Smart Hub (SASH), a signal from the first network requesting a communication connection;
- establishing a first connection between the first network and the SASH;
- establishing a second connection between the SASH and the second network by creating and hosting a secure virtual private network (VPN) and requesting a connection from a cyber-physical system (CPS) device, wherein the SASH securely connects the CPS device to the first network through the second network;
- receiving, at the SASH, data from the first network having a first protocol;
- translating the data having the first protocol into data having a second protocol;
- and
- transmitting the data having the second protocol from the SASH to the second network, wherein the second network is a CPS network running fieldbus network protocol supporting real-time and performance constraints, and the second network is restricted to a point to point connection with a master system.
A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform an operation for providing a secure communication between a first network and a second network, the operation comprising:
- receiving, at a Secure Access Smart Hub (SASH), a signal from the first network requesting a communication connection;
- establishing a first connection between the first network and the SASH;
- establishing a second connection between the SASH and the second network by creating and hosting a secure virtual private network (VPN) and requesting a connection from a cyber-physical system (CPS) device, wherein the SASH securely connects the CPS device to the first network through the second network;
- receiving, at the SASH, data from the first network having a first protocol;
- translating the data having the first protocol into data having a second protocol;
- and
- transmitting the data having the second protocol from the SASH to the second network, wherein the second network is a CPS network running fieldbus network protocol supporting real-time and performance constraints, and the second network is restricted to a point to point connection with a master system.
Dependencies are inferred from the claim text.